CVE-2013-2119

CVE-2013-2119 is a local denial-of-service and privilege escalation vulnerability affecting Phusion Passenger gem versions prior to 3.0.21 and 4.0.5, impacting Ruby applications and Red Hat OpenShift. An attacker can exploit this by pre-creating a temporary "config" file in a predictable /tmp/ directory, preventing application startup or gaining elevated privileges. With a CVSS score of 4.6, this vulnerability has low attack complexity and requires local access, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.